BORME Events API (bormeapi.com) is operated by an independent developer in Spain. Contact: [email protected].
To provide and secure the service, meter plans, deliver the alerts you configured, respond to support requests, and send strictly transactional email (alerts, key/billing notices). No advertising, no selling of personal data.
Cloudflare (hosting/CDN/email routing), Resend (transactional email), Paddle (payments, when applicable), Apify (if you use the actor distribution), Google Ireland Ltd (Google Analytics, only with your consent). Each processes data under their own GDPR-compliant terms.
The site sets no analytics cookies until you choose. If you click Accept in the cookie banner, Google Analytics 4 sets the cookies _ga and _ga_<id> for 13 months to count visits and pages viewed. Google signals and ad personalisation are switched off, and Analytics keeps the event data for 14 months. If you click Reject, Analytics is not loaded at all. You can change your choice at any time with the Cookies link in the footer; withdrawing deletes those cookies. The account area never loads Analytics. The legal basis is your consent (GDPR art. 6(1)(a) and art. 22.2 of the Spanish LSSI). Google may process this data in the United States under the EU–US Data Privacy Framework.
The datasets we serve derive from BORME, an official gazette whose publication is mandated by Spanish law; it contains names of company officers as part of the public record. If you are named in the registry and wish your name masked in our derived outputs going forward, write to [email protected] — we honor documented requests (the official gazette itself remains unaffected). The names of officers published in the BORME also appear on our public company pages (/company/… and /es/empresa/…); the same request masks them there.
Under the GDPR you may request access, rectification, erasure, restriction or portability of your personal data, and lodge a complaint with the AEPD (aepd.es). Email us and we will respond within 30 days.
Account and usage records are kept while your key is active and up to 24 months after, unless law requires longer (invoicing). Waitlist emails are deleted on request.